sebiw

First of all: Huge respect for getting something out the door, looks really useful.

> I'm considering working on this full time. If you have some advice or opportunities on how I can support myself doing this, let me know!

You could consider an "enterprise" tier with a special subset of features and guaranteed support. But my experience tells me this will be really hard to substantially monetize, as the customer profile for that solution is probably not spending on software until they really need to (the saying goes: selling to developers is impossible, you need to sell to their boss). Maybe a donation model or a creator-centric thing could work out!

Source?

Which brings us to the old saying: Do not deserialize untrusted data.

In the context of Rubygems and their specs this obviously is harder to manage but dependencies such as Rubygems are and will always be part of your app's Trusted Computing Base.

At this point, the current BMW has to die and reinvent themselves in a fundamentally better way. Breaks my heart as longtime BMW fan and previous owner of some older models. What have they done to the DNA of that company...

Domain Registrars usually have shitty, subpar DNS eg. without Anycast or DNSSEC.

MacBook Pro M5 Max, 128GB RAM + oMLX|LM Studio|Llama.cpp|etc. + Opencode|etc. + Models from DeepSeek|Qwen|Google. There are alternatives to centralized, cloud-based LLMs!

Defense in depth is a thing but I agree that relying on it is not a good idea.

> It's not that much work to trust my root certificate on each device

Sure, but is trusting your homebrewed CA on all your devices for essentially everything really a good idea?

When your homebrewed CA somehow gets compromised, all your devices are effectively compromised and not only for local connections, but everything that uses PKIX.

Dogfooding their future products!

Yup, their Git Push Deployment was really a killer concept and a huge gateway for people just writing good apps not needing to care about infra and still being able to get a production-ready setup.

Sustaining as in sustaining their shareholders.